This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa File: Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa (raw, json) Hash identifier: DVQde1db5OGzpAw+ZFDgqxFZ7/Y4TU4NFBnhQeqaz0U= Subject key identifier: 46:EE:11:95:4B:37:C4:BA:88:E2:2D:8B:94:74:33:F7:E0:3B:57:06 Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Certificate serial: 019B7E3826A21C13C2F1F5289490B075FC9D Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57317 IP address blocks: 185.134.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:26:a2:1c:13:c2:f1:f5:28:94:90:b0:75:fc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46ee11954b37c4ba88e22d8b947433f7e03b5706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:40:61:2c:7e:17:3b:78:d0:2c:79:b0:53: 83:54:40:5b:26:44:3c:d2:ba:59:ee:bb:bc:6d:dd: d4:e5:79:ed:06:c7:2a:b6:27:48:bf:24:00:af:8d: 55:b9:d5:5a:49:e5:25:74:33:03:3d:23:12:8a:58: f7:99:29:fa:98:48:cc:ee:61:b6:a6:15:d2:f8:22: ab:14:5f:9f:e0:4f:da:fc:d4:7c:3b:17:2c:3b:99: 57:d8:76:f4:ff:99:4e:81:9d:6f:93:dc:81:a5:df: c5:13:63:d7:51:d0:d3:ee:7c:37:55:22:c7:df:b7: 71:0e:60:d0:fd:34:a3:d1:52:85:7c:91:f0:d5:97: bd:41:4c:08:e9:88:2e:be:32:ee:f5:24:a0:ec:a3: 6f:48:86:e3:4b:db:73:41:23:4e:c0:1f:a6:a5:8e: d1:75:10:d4:0c:29:80:0a:cf:43:ab:26:59:10:c4: c0:e4:4e:aa:0a:f8:bc:4d:e8:f4:fd:c7:f7:cc:b7: d4:83:3c:8f:87:64:4a:5d:2d:cd:a1:17:df:1d:70: bc:b1:6b:cb:f2:23:42:ba:29:27:0a:4d:4e:48:c2: 3e:65:c6:1f:a7:9c:a8:d5:f8:0b:75:a2:b8:5f:b3: 49:68:8e:7e:1b:93:7e:86:be:06:e2:78:db:ce:26: d2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EE:11:95:4B:37:C4:BA:88:E2:2D:8B:94:74:33:F7:E0:3B:57:06 X509v3 Authority Key Identifier: keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.242.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ed:68:9a:c2:cd:9c:5d:32:a6:df:b0:3f:d7:71:00:de:43: cb:93:7c:ee:b7:9c:16:80:74:60:25:ad:96:d5:25:44:a4:8f: d8:00:53:40:6c:b9:dd:85:31:b0:cc:c6:54:98:5d:14:d4:9f: 71:34:dd:44:bd:4a:48:9e:69:6e:4a:91:6d:34:75:1a:bf:3f: 3f:22:ca:48:fe:5b:05:de:a6:09:37:20:a5:f3:1b:d8:c9:ac: 2e:d6:07:93:ad:09:18:89:59:70:6c:80:9d:2d:62:dc:cc:c3: 79:0f:2e:96:61:42:f2:58:84:9f:3d:34:4f:cb:3c:55:2e:18: 7e:7f:39:40:b1:ab:ca:60:46:52:d8:b3:cd:27:28:b3:65:a0: a3:1a:7c:c8:58:10:82:1c:1a:24:46:58:93:5b:1d:f8:30:fd: db:57:7e:d7:d5:ed:e5:cb:b9:18:0f:46:9b:e3:b4:21:23:8f: b1:13:f5:79:a2:ec:06:d4:f1:23:86:df:95:2d:26:bb:4f:99: da:ca:43:ea:a5:65:e3:6d:a0:3c:98:25:18:52:1e:f4:0c:b5: 7f:65:41:2b:25:ca:f2:79:83:9c:09:23:e2:29:5a:01:2c:98: 0f:cf:2b:69:c3:a8:91:b7:06:ae:b4:d2:86:22:8c:01:6c:16: 23:4f:4b:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCaiHBPC8fUolJCwdfydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx OGY1MTcwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmVlMTE5NTRiMzdjNGJhODhlMjJkOGI5NDc0MzNmN2UwM2I1NzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU9AYSx+Fzt40Cx5sFODVEBbJkQ8 0rpZ7ru8bd3U5XntBscqtidIvyQAr41VudVaSeUldDMDPSMSilj3mSn6mEjM7mG2 phXS+CKrFF+f4E/a/NR8OxcsO5lX2Hb0/5lOgZ1vk9yBpd/FE2PXUdDT7nw3VSLH 37dxDmDQ/TSj0VKFfJHw1Ze9QUwI6YguvjLu9SSg7KNvSIbjS9tzQSNOwB+mpY7R dRDUDCmACs9DqyZZEMTA5E6qCvi8Tej0/cf3zLfUgzyPh2RKXS3NoRffHXC8sWvL 8iNCuiknCk1OSMI+ZcYfp5yo1fgLdaK4X7NJaI5+G5N+hr4G4njbzibSBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEbuEZVLN8S6iOIti5R0M/fgO1cGMB8GA1UdIwQY MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt ZGVkYzUyYTJlZDhmLzEvUnU0UmxVczN4THFJNGkyTGxIUXo5LUE3VndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYbyMA0G CSqGSIb3DQEBCwUAA4IBAQAF7Wiaws2cXTKm37A/13EA3kPLk3zut5wWgHRgJa2W 1SVEpI/YAFNAbLndhTGwzMZUmF0U1J9xNN1EvUpInmluSpFtNHUavz8/IspI/lsF 3qYJNyCl8xvYyawu1geTrQkYiVlwbICdLWLczMN5Dy6WYULyWISfPTRPyzxVLhh+ fzlAsavKYEZS2LPNJyizZaCjGnzIWBCCHBokRliTWx34MP3bV37X1e3ly7kYD0ab 47QhI4+xE/V5ouwG1PEjht+VLSa7T5naykPqpWXjbaA8mCUYUh70DLV/ZUErJcry eYOcCSPiKVoBLJgPzytpw6iRtwautNKGIowBbBYjT0vd -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:35 2026 by rpki-client